Privacy notice.

Who is responsible

Impactify LTD (Cyprus company HE474043) operates Accountly and is responsible for the platform processing described here. Correspondence: Neofytou Nikolaidi & Theod. Kolokotroni, Onisiforou Center, 2nd Floor, 8011 Agios Theodoros, Paphos, Cyprus. Use the Contact us form with the subject “Privacy request” for questions or rights requests. A matched independent professional is responsible for their own professional records and explains their separate privacy arrangements before that work begins.

Enquiries and preparation tools

The Contact us form sends your name, email, phone number, chosen service and message to our internal team. We use them to answer the request and take steps you ask for before a possible contract. Providing the required contact details is necessary to send this form; you do not need to create an account or buy a service to ask a question. Start with a short, non-confidential summary. Do not send identity documents, bank credentials or confidential accounting records here.

The optional preparation tool creates a local brief in your browser. Unsaved entries remain in page memory. If you choose to continue to an account, the brief is temporarily stored in that tab's session storage for up to 30 minutes and can be saved as a private account draft after sign-in. It is cleared after transfer, on an expiry check or when the tab closes. A downloaded file stays on your device. This local tool is separate from the form that sends an enquiry.

Accounts and saved enquiries

Registration stores your name, email, phone number, password hash, account and session records. Your password is not stored in plain text. Email and phone details are self-declared and are not verified by email or SMS. Saved drafts belong to your account; submitted enquiries become available to authorised staff for review and response. Necessary session cookies support sign-in. We use these records to provide the account and services you request, and use proportionate security records for our legitimate interest in protecting the service.

Account settings support profile corrections, record export, password changes, session revocation and a recorded deletion-review request. You can delete a private draft. A submitted record or deletion request is not proof that every related record has been erased. Staff assess identity, any continuing service and applicable retention duties before completing the request.

Checkout and service follow-up

For an order we process the accepted scope, name, email, phone, price, VAT, discount, payment references, status and follow-up information. Stripe hosts checkout and collects payment details, billing address and any tax identification you supply. We do not receive your full card number or security code. Stripe retains its payment and risk records under its own applicable terms and privacy notice. The platform uses confirmed payment status to deliver the package, keep order records and arrange the introductory meeting within 2–3 days. An unsuccessful or cancelled checkout is not a confirmed payment.

Contract performance and pre-contract steps support processing needed for your requested service. Applicable accounting and tax duties support required financial records. Our legitimate interests support proportionate fraud prevention, reconciliation and handling disputes. We do not use a general enquiry as consent to unrelated marketing.

Providers and internal notifications

Vercel provides hosting and request processing; Turso provides the account database; Resend delivers internal enquiry and registration notifications; Stripe processes checkout. Notifications include the contact information needed for staff to respond. Confirmed order notifications include the service and contact deadline. Automated notifications are sent only to our internal team, not as customer marketing emails or SMS. A staff member may contact you using the details you supplied.

We share relevant information with a selected independent provider only to arrange the requested work and subject to the accepted scope and appropriate confidentiality arrangements. A link to another platform does not automatically transfer your account or enquiry to it. Service providers may process data outside the EEA. Where required, processing arrangements use an applicable adequacy decision or appropriate contractual safeguards, including standard contractual clauses. Ask through the privacy-request route for information about safeguards relevant to your record.

How long information is kept

We retain account and enquiry records while needed to manage the account, answer open requests or deliver an agreed service. When that purpose ends, we review the record for deletion or anonymisation, subject to a documented legal, accounting or dispute-related need to retain particular information. Unconverted enquiries are reviewed after 12 months of inactivity. Closed accounts and completed follow-up records are reviewed for removal when the associated service and any necessary retention period end. These are staff review periods, not a promise of automatic deletion on a particular day.

Accepted internal-notification queue payloads are cleared after provider acceptance; queue receipts older than 90 days are removed during queue maintenance. Pending notifications remain until delivered or resolved. This does not delete separate internal mailbox copies, provider logs, Stripe records or order records, which are reviewed under their own purpose and applicable duties. Security request limits expire separately. We limit any retained record to what remains necessary and explain a retention reason when it affects a rights request.

Your choices and rights

Where applicable, you may request access, correction, erasure, restriction or a portable copy of your personal data, and object to processing based on legitimate interests. Where processing relies on consent, you can withdraw that consent without affecting earlier lawful processing. Some records must remain for a legal duty or claim. We explain any applicable limitation and normally respond to a rights request within one month, with notice if a lawful extension is necessary. We may ask proportionate questions to confirm identity; do not upload identity documents through the general form.

Use Contact us — Privacy request, or account settings where available. You can complain to the Cyprus Commissioner for Personal Data Protection or your competent supervisory authority. See the European Commission explanation of individual rights.

Cookies, decisions and changes

The site uses necessary account/session and security technologies. It does not install marketing analytics or advertising trackers. We do not make decisions with legal or similarly significant effects about you solely through automated platform matching. A professional confirms their own assignment. If the processing changes materially, we update this notice and provide any further information or choice required before the new use.